JP2024010202A - Management device, communication system, vehicle communication management method, and vehicle communication management program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a management device, a communication system, a vehicle, a vehicle communication management method, and a vehicle communication management program that flexibly construct a network of a new configuration while maintaining a stable operation in the network.

SOLUTION: In a vehicle communication system, a management unit of a relay device that is a management device includes: a detection unit which detects a new function unit that is a function unit to be newly added to a network including one or a plurality of on-board function units (ECU and application); a generation unit which acquires function unit information on the new function unit detected by the detection unit and function unit information on the on-board function units, and generates, on the basis of the acquired function unit information, configuration information on a new network which is a network further including the new function unit; and an acquisition unit that acquires, from a database in a storage device, establishment information indicating the establishment of the new network, which corresponds to the configuration information generated by the generation unit.

SELECTED DRAWING: Figure 4

COPYRIGHT: (C)2024,JPO&INPIT

Description

The present disclosure relates to a management device, a communication system, a vehicle, a vehicle communication management method, and a vehicle communication management program.
This application claims priority based on Japanese Patent Application No. 2019-39558 filed on March 5, 2019, and the entire disclosure thereof is incorporated herein.

Patent Document 1 (Japanese Unexamined Patent Publication No. 2018-192876) discloses the following driving support device. That is, the driving support device is a driving support device that can be connected to an in-vehicle network including one or more communication buses, and includes a message acquisition unit that acquires communication messages flowing on the communication bus, and a message acquisition unit that acquires communication messages flowing through the communication bus. a determination unit that determines whether or not an electronic control unit for controlling a vehicle is connected to the communication bus based on a communication message sent to the communication bus; and a determination unit that connects the electronic control unit to the communication bus by the determination unit. and a communication control unit that stops sending a communication message to the communication bus to which the electronic control device is connected when it is determined that the electronic control unit is connected to the communication bus.

Further, Patent Document 2 (Japanese Patent Laid-Open No. 2017-220220) discloses the following vehicle electronic control device. That is, the vehicle electronic control device is a vehicle electronic control device (1 to 5) that is connected to an in-vehicle network (6) and executes a predetermined function by a mounted application, and responds to requests from the application. In accordance with the request, a service that utilizes the functions installed in another vehicle electronic control device connected to the in-vehicle network is requested, and if a service request is received from the other vehicle electronic control device, the service is requested. A service interface (8) that generates and responds, and a service that transmits and receives messages corresponding to service requests and responses using a predetermined protocol between the service interface and the service interface of the other vehicle electronic control unit. It includes a bus (9) and a service management unit (11) that manages the location of the services to dynamically enable mutual use of the services.

Japanese Patent Application Publication No. 2018-192876 JP2017-220220A

The management device of the present disclosure includes a detection unit that detects addition of a functional unit to a network including one or more in-vehicle functional units, and a functional unit of a new functional unit whose addition is detected by the detection unit. information, and functional unit information of the in-vehicle functional unit, and generates configuration information of a new network, which is the network further including the new functional unit, based on each acquired functional unit information, and a storage; and an acquisition unit that acquires feasibility information indicating the feasibility of the new network, which corresponds to the configuration information generated by the generation unit, from a database in the device.

The communication system of the present disclosure includes a management device and one or more in-vehicle functional units that configure a network, and the management device detects the addition of a functional unit to the network, and also detects the addition of the functional unit to the network. The one or more in-vehicle functional units transmit their own functional unit information to the management device, and the management device acquires the functional unit information from the new functional unit that is the new function unit. The management device generates configuration information of a new network that is the network further including the new function unit based on the function unit information and the function unit information received from one or more of the in-vehicle function units, and the management device Feasibility information indicating the feasibility of the new network corresponding to the generated configuration information is obtained from a database in the device.

A vehicle communication management method of the present disclosure is a vehicle communication management method in a management device, the method detecting addition of a functional unit to a network including one or more in-vehicle functional units. step, the functional unit information of the new functional unit that is the functional unit whose addition is detected, and the functional unit information of the in-vehicle functional unit, and based on the acquired functional unit information, further add the new functional unit. The method includes the step of generating configuration information of a new network that is the network included in the network, and the step of acquiring feasibility information indicating the feasibility of the new network corresponding to the generated configuration information from a database in a storage device.

A vehicle communication management method of the present disclosure is a vehicle communication management method in a communication system including a management device and one or more in-vehicle functional units constituting a network, wherein the management device connects the functional units to the network. detecting the addition and acquiring functional unit information from the new functional unit that is the functional unit that has detected the addition; and one or more of the in-vehicle functional units transmitting their own functional unit information to the management device. the network further including the new functional unit based on the functional unit information acquired from the new functional unit and the functional unit information received from one or more of the in-vehicle functional units; The method includes a step of generating configuration information of a certain new network, and a step of the management device acquiring feasibility information indicating the feasibility of the new network corresponding to the generated configuration information from a database in a storage device. .

The vehicle communication management program of the present disclosure is a vehicle communication management program used in a management device, and includes a computer, a detection unit that detects addition of a functional unit to a network including one or more in-vehicle functional units, and a detection unit that detects addition of a functional unit to a network that includes one or more in-vehicle functional units. Functional unit information of the new functional unit, which is the functional unit whose addition was detected by the function unit, and functional unit information of the in-vehicle functional unit are acquired, and the new functional unit is further included based on the acquired functional unit information. From a generation unit that generates configuration information of the new network, which is the network, and a database in a storage device, feasibility information indicating the feasibility of the new network corresponding to the configuration information generated by the generation unit is acquired. This is a program to function as an acquisition unit.

One aspect of the present disclosure can be implemented as a semiconductor integrated circuit that implements part or all of a management device. Further, one aspect of the present disclosure can be realized as a semiconductor integrated circuit that implements part or all of a communication system. Further, one aspect of the present disclosure can be realized as a program for causing a computer to execute processing steps in a communication system.

FIG. 1 is a diagram showing the configuration of a communication system according to an embodiment of the present disclosure. FIG. 2 is a diagram illustrating an example of a configuration of a vehicle communication system according to an embodiment of the present disclosure. FIG. 3 is a diagram illustrating an example of a network configuration in a vehicle communication system according to an embodiment of the present disclosure. FIG. 4 is a diagram illustrating a configuration of a management unit according to an embodiment of the present disclosure. FIG. 5 is a diagram illustrating an example of the configuration of a new network in the vehicle communication system according to the embodiment of the present disclosure. FIG. 6 is a diagram illustrating another example of the configuration of a new network in the vehicle communication system according to the embodiment of the present disclosure. FIG. 7 is a diagram illustrating another example of the configuration of a new network in the vehicle communication system according to the embodiment of the present disclosure. FIG. 8 is a diagram showing a configuration of a server in a communication system according to an embodiment of the present disclosure. FIG. 9 is a diagram illustrating an example of a success/failure database stored in a storage device in a communication system according to an embodiment of the present disclosure. FIG. 10 is a diagram illustrating an example of a setting database stored in a storage device in a communication system according to an embodiment of the present disclosure. FIG. 11 is a diagram illustrating another example of the configuration of a new network after setting changes in the vehicle communication system according to the embodiment of the present disclosure. FIG. 12 is a flowchart that defines the operational procedure when the management unit constructs a new network in the communication system according to the embodiment of the present disclosure. FIG. 13 is a diagram illustrating an example of a sequence of new network construction processing in the communication system according to the embodiment of the present disclosure. FIG. 14 is a diagram illustrating another example of the sequence of the new network construction process in the communication system according to the embodiment of the present disclosure. FIG. 15 is a diagram illustrating another example of the sequence of the new network construction process in the communication system according to the embodiment of the present disclosure. FIG. 16 is a diagram illustrating another example of the sequence of the new network construction process in the communication system according to the embodiment of the present disclosure. FIG. 17 is a diagram illustrating another example of the sequence of the new network construction process in the communication system according to the embodiment of the present disclosure.

In recent years, with the spread of car sharing and the desire to improve the processing capacity of in-vehicle devices installed in vehicles, there is a need to customize in-vehicle networks by adding applications to the in-vehicle networks. As described above, there is a need for technology that allows various applications to be added to or removed from the in-vehicle network according to the needs of the user.

[Problems that this disclosure seeks to solve]
Beyond the techniques described in Patent Documents 1 and 2, a technique that can flexibly construct a network with a new configuration while maintaining stable operation in the network is desired.

The present disclosure has been made to solve the above-mentioned problems, and the purpose is to provide a management device, a communication system, and a communication system that can flexibly construct a network with a new configuration while maintaining stable operation in the network. An object of the present invention is to provide a vehicle, a vehicle communication management method, and a vehicle communication management program.

[Effects of this disclosure]
According to the present disclosure, it is possible to flexibly construct a network with a new configuration while maintaining stable operation in the network.

[Description of embodiments of the present disclosure]
First, the contents of the embodiments of the present disclosure will be listed and explained.

(1) A management device according to an embodiment of the present disclosure includes a detection unit that detects addition of a functional unit to a network including one or more in-vehicle functional units, and the functional unit whose addition is detected by the detection unit. functional unit information of the new functional unit and functional unit information of the in-vehicle functional unit, and based on each acquired functional unit information, configuration information of a new network that is the network further including the new functional unit. and an acquisition unit that acquires feasibility information indicating the feasibility of the new network, which corresponds to the configuration information generated by the generation section, from a database in a storage device.

In this way, with the configuration that generates the configuration information of a new network including the detected new functional unit and obtains the feasibility information indicating the feasibility of the new network from the database, the feasibility information of the network generated in advance is obtained. A new network can be constructed using the verification results. As a result, it is possible to construct a new network whose feasibility is guaranteed by taking into consideration the logical and physical configurations. This makes it possible to suppress the occurrence of delays in communication. Therefore, a network with a new configuration can be flexibly constructed while maintaining stable operation in the network.

(2) Preferably, the management device further includes, based on the feasibility information acquired by the acquisition unit, one of the new function unit and one or more of the in-vehicle function units that configure the new network. At least one of them includes a notification unit that notifies settings for communicating in the new network.

With such a configuration, the setting contents of each functional unit can be changed to appropriate contents according to the specifications regarding communication in the new network, for example, the topology.

(3) Preferably, the notification unit is configured to perform communication in the new network from among one or more functional units included in the network before the new functional unit is added and the new functional unit. The functional unit whose setting contents need to be changed is specified, and the specified functional unit is notified of the setting contents.

With such a configuration, for example, it is possible to notify the setting contents to a functional section whose setting contents need to be changed, while omitting notification of the setting contents to a functional section whose setting contents do not need to be changed. Therefore, unnecessary communication between the management device and the functional units can be suppressed.

(4) Preferably, the generation unit changes generation conditions based on the feasibility information acquired by the acquisition unit, and newly generates the configuration information according to the changed generation conditions.

With such a configuration, if it is difficult to establish a new network, for example, the configuration information of a new network that has been changed by adding a new functional part to the network can be newly generated, and the feasibility information of the new network after the change can be generated. can be obtained. This enables more flexible construction of new networks.

(5) Preferably, the management device further includes a storage unit that stores the configuration information generated by the generation unit and the feasibility information corresponding to the configuration information.

With this configuration, when building a new network by adding a new functional unit to the network, the configuration information of the existing network can be retrieved from the storage unit, which simplifies the network building process. can.

(6) A vehicle according to an embodiment of the present disclosure includes the management device.

With such a configuration, in a vehicle equipped with a management device, a network with a new configuration can be flexibly constructed while maintaining stable operation in the network.

(7) A communication system according to an embodiment of the present disclosure includes a management device and one or more in-vehicle functional units forming a network, and the management device detects addition of a functional unit to the network. At the same time, obtain functional unit information from the new functional unit that is the functional unit whose addition is detected,
The one or more in-vehicle functional units transmit their own functional unit information to the management device, and the management device transmits the functional unit information acquired from the new functional unit and from the one or more in-vehicle functional units. Based on the received functional unit information, the management device generates configuration information of a new network that is the network further including the new functional unit, and the management device corresponds to the generated configuration information from a database in a storage device. Obtain feasibility information indicating the feasibility of the new network.

In this way, the configuration that generates the configuration information of a new network including the detected new functional unit and obtains the feasibility information indicating the feasibility of the new network from the database enables verification of the feasibility of the network that has been verified in advance. The results can be used to build new networks. As a result, it is possible to construct a new network whose feasibility is guaranteed by taking into consideration the logical and physical configurations, thereby suppressing the occurrence of communication delays caused by adding new functional units to the network. can do. Therefore, a network with a new configuration can be flexibly constructed while maintaining stable operation in the network.

(8) Preferably, the communication system further includes an update unit that updates the database in the storage device.

With such a configuration, new combinations of network configuration information and feasibility information can be registered in the database, making it possible to construct a variety of networks.

(9) Preferably, when detecting an abnormality in the new network, the management device transmits the configuration information of the new network and abnormality detection information indicating that the abnormality has occurred to the updating unit, and updates the database based on the abnormality detection information received from the management device.

With such a configuration, the occurrence of an abnormality in the new network can be reflected in the database, so it is possible to construct a more stable new network using the updated database.

(10) Preferably, the communication system further provides information on the configuration information generated by the management device when the feasibility information corresponding to the configuration information generated by the management device does not exist in the database. A verification unit is provided to verify the validity.

With such a configuration, if the feasibility of the new network has not been verified in advance, the feasibility information of the new network can be acquired through new verification, and construction of the new network can be attempted.

(11) A vehicle communication management method according to an embodiment of the present disclosure is a vehicle communication management method in a management device, and includes the steps of: detecting addition of a functional unit to a network including one or more in-vehicle functional units; Functional unit information of the new functional unit, which is the functional unit whose addition has been detected, and functional unit information of the in-vehicle functional unit are acquired, and based on the acquired functional unit information, the network further includes the new functional unit. The method includes the step of generating configuration information of a new network, which is the following, and the step of acquiring feasibility information indicating the feasibility of the new network, which corresponds to the generated configuration information, from a database in a storage device.

In this way, by the method of generating configuration information of a new network including the detected new functional unit and acquiring feasibility information indicating the feasibility of the new network from the database, the feasibility information of the network generated in advance is obtained. A new network can be constructed using the verification results. As a result, it is possible to construct a new network whose feasibility is guaranteed by taking into consideration the logical and physical configurations. This makes it possible to suppress the occurrence of delays in communication. Therefore, a network with a new configuration can be flexibly constructed while maintaining stable operation in the network.

(12) A vehicle communication management method according to an embodiment of the present disclosure is a vehicle communication management method in a communication system including a management device and one or more in-vehicle functional units constituting a network, wherein the management device , a step of detecting the addition of a functional unit to the network and acquiring functional unit information from a new functional unit that is the functional unit whose addition has been detected, and one or more of the in-vehicle functional units transmitting information to the management device; and the management device transmitting information to the new function unit based on the function unit information acquired from the new function unit and the function unit information received from the one or more in-vehicle function units. a step of generating configuration information of the new network, which is the network further including a functional unit; and a feasibility indicating the feasibility of the new network corresponding to the generated configuration information by the management device from a database in a storage device. and obtaining information.

In this way, by the method of generating configuration information of a new network including the detected new functional unit and acquiring feasibility information indicating the feasibility of the new network from the database, the feasibility information of the network generated in advance is obtained. A new network can be constructed using the verification results. As a result, it is possible to construct a new network whose feasibility is guaranteed by taking into consideration the logical and physical configurations. This makes it possible to suppress the occurrence of delays in communication. Therefore, a network with a new configuration can be flexibly constructed while maintaining stable operation in the network.

(13) A vehicle communication management program according to an embodiment of the present disclosure is a vehicle communication management program used in a management device, which allows a computer to add a functional unit to a network including one or more in-vehicle functional units. A detection unit to detect, functional unit information of a new functional unit that is the functional unit whose addition is detected by the detection unit, and functional unit information of the in-vehicle functional unit are acquired, and based on each acquired functional unit information. , a generation unit that generates configuration information of the new network, which is the network further including the new functional unit, and the feasibility of the new network corresponding to the configuration information generated by the generation unit from a database in a storage device; This is a program for functioning as an acquisition unit that acquires feasibility information indicating .

In this way, with the configuration that generates the configuration information of a new network including the detected new functional unit and obtains the feasibility information indicating the feasibility of the new network from the database, the feasibility information of the network generated in advance is obtained. A new network can be constructed using the verification results. As a result, it is possible to construct a new network whose feasibility is guaranteed by taking into consideration the logical and physical configurations. This makes it possible to suppress the occurrence of delays in communication. Therefore, a network with a new configuration can be flexibly constructed while maintaining stable operation in the network.

Embodiments of the present disclosure will be described below with reference to the drawings. In addition, the same reference numerals are attached to the same or corresponding parts in the drawings, and the description thereof will not be repeated. Furthermore, at least some of the embodiments described below may be combined arbitrarily.

[Communications system]
FIG. 1 is a diagram showing the configuration of a communication system according to an embodiment of the present disclosure.

Referring to FIG. 1, communication system 400 includes a server 180 and one or more vehicle communication systems 300. Vehicle communication system 300 is mounted on vehicle 1.

FIG. 2 is a diagram illustrating an example of a configuration of a vehicle communication system according to an embodiment of the present disclosure.

Referring to FIG. 2, vehicle communication system 300 includes one or more in-vehicle ECUs (Electronic Control Units) 111 and relay device 112. Specifically, the vehicle communication system 300 includes vehicle ECUs 111A to 111E as the vehicle ECU 111. Relay device 112 includes a management section 200.

In-vehicle ECUs 111A to 111E and relay device 112 each include an application 100.

More specifically, as applications 100, in-vehicle ECU 111A includes application 100A, in-vehicle ECU 111B includes application 100B, in-vehicle ECU 111C includes application 100C, in-vehicle ECU 111D includes application 100D, and in-vehicle ECU 111E includes application 100E. Device 112 includes application 100F.

The on-vehicle ECUs 111A to 111E and the relay device 112 constitute a network 12.

The in-vehicle ECU 111 and the application 100 are examples of an in-vehicle functional unit that is a functional unit installed in the vehicle 1 among the functional units or objects in the network 12 . Relay device 112 is an example of a management device.

Note that the vehicle communication system 300 is not limited to a configuration including five vehicle-mounted ECUs 111, but may be configured to include one, two, three, four, or six or more vehicle-mounted ECUs 111. Furthermore, the present invention is not limited to a configuration in which one application 100 is provided in one in-vehicle ECU 111, but may be a configuration in which two or more applications 100 are provided in one in-vehicle ECU 111.

Further, the vehicle communication system 300 is not limited to a configuration including one relay device 112 but may be configured to include a plurality of relay devices 112. Further, the present invention is not limited to a configuration in which one application 100 is provided in one relay device 112, but may be a configuration in which two or more applications 100 are provided in one relay device 112.

Further, the network 12 may include an external device outside the vehicle 1 and an application installed in the external device as functional units, that is, objects.

The in-vehicle ECU 111 is, for example, a TCU (Telematics Communication Unit), an automatic driving ECU, an engine ECU, a sensor, a navigation device, a human-machine interface, a camera, and the like.

In this example, the on-vehicle ECUs 111A, 111B, 111C, 111D, and 111E are a TCU, an intake pressure sensor, an engine ECU, a temperature sensor, and a water temperature sensor, respectively.

Hereinafter, the on-vehicle ECUs 111A, 111B, 111C, 111D, and 111E are also referred to as TCU 111A, intake pressure sensor 111B, engine ECU 111C, temperature sensor 111D, and water temperature sensor 111E, respectively.

In the network 12, the in-vehicle ECUs 111A to 111E are connected to a relay device 112 via an Ethernet (registered trademark) cable 11.

The relay device 112 is, for example, a gateway device, and can relay data between a plurality of in-vehicle ECUs 111 connected to itself.

The relay device 112 performs relay processing of Ethernet frames in accordance with the Ethernet communication standard. Specifically, the relay device 112 relays, for example, Ethernet frames exchanged between the in-vehicle ECUs 111. IP packets are stored in the Ethernet frame.

Note that the vehicle communication system 300 is not limited to a configuration in which Ethernet frames are relayed according to the Ethernet communication standard, and may also be configured, for example, by CAN (Controller Area Network) (registered trademark), FlexRay (registered trademark), or MOST (Media Oriented Systems Transport). ) (registered trademark) and LIN (Local Interconnect Network), the data may be relayed in accordance with communication standards.

Referring to FIGS. 1 and 2, TCU 111A can communicate with server 180. In detail, the TCU 111A can communicate with the server 180 via the wireless base station device 161 using, for example, IP packets.

More specifically, the TCU 111A can perform wireless communication with the wireless base station device 161, for example, in accordance with communication standards such as LTE (Long Term Evolution) or 3G.

Specifically, upon receiving an IP packet from the server 180 via the external network 170, the wireless base station device 161 includes the received IP packet in a wireless signal and transmits it to the TCU 111A.

For example, when the TCU 111A receives a wireless signal including an IP packet from the server 180 from the wireless base station device 161, the TCU 111A acquires the IP packet from the received wireless signal, stores the acquired IP packet in an Ethernet frame, and transmits it to the relay device 112. Send to.

Further, when the TCU 111A receives an Ethernet frame from the relay device 112, the TCU 111A acquires an IP packet from the received Ethernet frame, includes the acquired IP packet in a wireless signal, and transmits the wireless signal to the wireless base station device 161.

Upon receiving the wireless signal from the TCU 111A, the wireless base station device 161 acquires an IP packet from the received wireless signal, and transmits the acquired IP packet to the server 180 via the external network 170.

The intake pressure sensor 111B is capable of communicating with other in-vehicle ECUs 111 via the relay device 112, and periodically measures the intake pressure of the engine in the vehicle 1, for example.

The engine ECU 111C is capable of communicating with other in-vehicle ECUs 111 via the relay device 112, and controls the engine in the vehicle 1, for example.

More specifically, the engine ECU 111C acquires and acquires information indicating, for example, the engine rotation speed, the vehicle speed of the vehicle 1, the engine shaft torque, the transmission status, the throttle valve status, and the measured values of each sensor. The engine is controlled based on the information obtained.

Further, engine ECU 111C can transmit part or all of the acquired information to relay device 112, for example, in response to a request from relay device 112.

The temperature sensor 111D is capable of communicating with other in-vehicle ECUs 111 via the relay device 112, and periodically measures the outside temperature of the vehicle 1, for example.

The water temperature sensor 111E can communicate with other in-vehicle ECUs 111 via the relay device 112, and periodically measures the temperature of the cooling water circulating in the engine of the vehicle 1, for example.

Each application 100 performs predetermined processing in the in-vehicle ECU 111 or relay device 112 in which it is provided, for example, by performing application layer processing. For example, the application 100D in the temperature sensor 111D generates temperature information indicating the outside temperature of the vehicle 1 at a predetermined period.

FIG. 3 is a diagram illustrating an example of a network configuration in a vehicle communication system according to an embodiment of the present disclosure.

Referring to FIG. 3, relay device 112 includes communication ports 120A, 120B, and 120C. Each of communication ports 120A, 120B, and 120C is also referred to as communication port 120. Communication port 120 is, for example, a terminal to which Ethernet cable 11 can be connected.

In the example shown in FIG. 3, TCU 111A is connected to communication port 120A, intake pressure sensor 111B and engine ECU 111C are connected to communication port 120B, and temperature sensor 111D and water temperature sensor 111E are connected to communication port 120C.

Further, in the network 12, the TCU 111A belongs to a VLAN (Virtual Local Area Network) 10. Intake pressure sensor 111B and engine ECU 111C belong to VLAN20 different from VLAN10. Temperature sensor 111D and water temperature sensor 111E belong to VLAN30 different from VLAN10 and VLAN20.

For example, the relay device 112 performs a process of relaying Ethernet frames between in-vehicle ECUs 111 belonging to the same VLAN. Specifically, the relay device 112 transmits the received Ethernet frame to the destination in-vehicle ECU 111 based on the source MAC (Media Access Control) address and destination MAC address included in the received Ethernet frame.

Further, the relay device 112 performs, for example, relay processing of IP packets between the in-vehicle ECUs 111 belonging to different VLANs. Specifically, the relay device 112 acquires an IP packet from the received Ethernet frame, and transmits the IP packet to the destination in-vehicle ECU 111 based on the destination IP address of the acquired IP packet.

[Management Department]
FIG. 4 is a diagram illustrating a configuration of a management unit according to an embodiment of the present disclosure.

Referring to FIG. 4, management section 200 includes a detection section 210, a generation section 220, an acquisition section 230, a storage section 240, a notification section 250, and an abnormality detection section 260.

The detection unit 210, the generation unit 220, the acquisition unit 230, the notification unit 250, and the abnormality detection unit 260 are realized by, for example, a processor such as a CPU (Central Processing Unit) and a DSP (Digital Signal Processor).

[Detection part]
The detection unit 210 detects a new functional unit that is newly added to the network 12. That is, the detection unit 210 detects addition of a new functional unit to the network 12. More specifically, the detection unit 210 detects addition of the in-vehicle ECU 111, external device, application 100, etc. to the network 12. As an example, the detection unit 210 detects the in-vehicle ECU 111 newly added to the network 12 as a new ECU.

For example, the new function unit transmits connection request information for requesting a communication connection in the network 12 to the detection unit 210.

The detection unit 210 receives the connection request information and detects the new functional unit that is the source of the connection request information.

Note that the detection unit 210 may be configured to periodically broadcast a search message for detecting a new functional unit, for example. In this case, the new function unit receives the search message and transmits the connection request information as a response to the received search message.

Hereinafter, the network 12 including the new functional unit will also be referred to as a new network, the network 12 before the new functional unit is added will also be referred to as an existing network, and the functional unit included in the existing network will also be referred to as an existing functional unit. The in-vehicle ECU 111 included in the existing network is an example of an existing functional unit, that is, an existing ECU.

FIG. 5 is a diagram illustrating an example of the configuration of a new network in the vehicle communication system according to the embodiment of the present disclosure.

Referring to FIG. 5, assume that an in-vehicle ECU 111G is newly added to the network 12. In this example, the in-vehicle ECU 111G is an image sensor. Hereinafter, the in-vehicle ECU 111G will also be referred to as the image sensor 111G. The image sensor 111G includes an application 100G, which is a new functional unit.

When the image sensor 111G receives power supply and is connected to the communication port 120C of the relay device 112 via, for example, the Ethernet cable 11, the image sensor 111G transmits connection request information for requesting communication connection in the network 12 to the detection unit 210. .

More specifically, the application 100G in the image sensor 111G generates an Ethernet frame that includes connection request information, its own ID, and the MAC address of the relay device 112 as the destination MAC address, and sends the generated Ethernet frame to the relay device 112. Send.

Upon receiving the Ethernet frame transmitted from the application 100G, the detection unit 210 in the relay device 112 performs authentication processing for the application 100G using the ID included in the received Ethernet frame.

When the application 100G is successfully authenticated, the detection unit 210 generates an Ethernet frame including authentication success information indicating that the authentication was successful and the MAC address of the image sensor 111G as the destination MAC address, and converts the generated Ethernet frame into an image. Send to sensor 111G.

Note that the new functional unit detected by the detection unit 210 is not limited to the application 100 included in the in-vehicle ECU 111 newly connected to the relay device 112. For example, the detection unit 210 may be configured to detect the application 100 installed in the in-vehicle ECU 111 in the existing network as a new functional unit.

FIG. 6 is a diagram illustrating another example of the configuration of a new network in the vehicle communication system according to the embodiment of the present disclosure.

Referring to FIG. 6, assume that in network 12, application 100H is newly installed as a new functional unit in engine ECU 111C, which is an existing functional unit.

When installed in the engine ECU 111C, the application 100H generates an Ethernet frame that includes connection request information, its own ID, and the MAC address of the relay device 112 as the destination MAC address, and transmits the generated Ethernet frame to the relay device 112. do.

Upon receiving the Ethernet frame transmitted from the application 100H, the detection unit 210 in the relay device 112 performs authentication processing for the application 100H using the ID included in the received Ethernet frame.

When the application 100H is successfully authenticated, the detection unit 210 generates an Ethernet frame including authentication success information indicating that the authentication was successful and the MAC address of the engine ECU 111C as the destination MAC address, and sends the generated Ethernet frame to the engine ECU 111C. Send to.

Note that the new functional unit detected by the detection unit 210 is not limited to the application 100 included in the in-vehicle ECU 111 newly connected to the relay device 112 or the application 100 installed in the in-vehicle ECU 111 as described above. For example, the detection unit 210 may be configured to detect the application 100 included in the external device 113 added to the network 12 outside the vehicle 1 as a new functional unit.

FIG. 7 is a diagram illustrating another example of the configuration of a new network in the vehicle communication system according to the embodiment of the present disclosure.

Referring to FIG. 7, assume that an external device 113 is newly added to the network 12. The external device 113 is a device provided outside the vehicle 1. External device 113 includes application 100J, which is a new functional unit.

The external device 113 can communicate with the TCU 111A. More specifically, the external device 113 can communicate with the TCU 111A via the wireless base station device 161 using, for example, IP packets.

The external device 113 transmits connection request information for requesting communication connection in the network 12 to the detection unit 210 via the TCU 111A.

More specifically, the application 100J in the external device 113 transmits an IP packet containing connection request information, its own ID, and the MAC address of the relay device 112 to the wireless base station device 161 via the external network 170.

When the wireless base station device 161 receives an IP packet from the external device 113 via the external network 170, the wireless base station device 161 includes the received IP packet in a wireless signal and transmits it to the TCU 111A.

When the TCU 111A receives a wireless signal including an IP packet from the application 100J from the wireless base station device 161, the TCU 111A acquires the IP packet from the received wireless signal, and uses the acquired IP packet and the MAC of the relay device 112 as the destination MAC address. An Ethernet frame including the address is generated, and the generated Ethernet frame is transmitted to the relay device 112.

Upon receiving the Ethernet frame from the TCU 111A, the detection unit 210 in the relay device 112 performs authentication processing for the application 100J using the ID included in the IP packet stored in the received Ethernet frame.

When the application 100J is successfully authenticated, the detection unit 210 generates an Ethernet frame including authentication success information indicating that the authentication was successful and the MAC address of the external device 113 as the destination MAC address, and sends the generated Ethernet frame to the TCU 111A. Send to.

When the TCU 111A receives the Ethernet frame from the detection unit 210, the TCU 111A acquires an IP packet from the received Ethernet frame, includes the acquired IP packet in a wireless signal, and transmits the wireless signal to the external device 113 via the wireless base station device 161.

When the detection unit 210 succeeds in authenticating the new function unit as described above, it outputs detection information indicating the ID of the new function unit to the generation unit 220.

[Generation part]
The generation unit 220 acquires the functional unit information of the in-vehicle functional unit and the functional unit information of the new functional unit, and generates configuration information of the new network based on each acquired functional unit information.

More specifically, when the generation unit 220 receives the detection information from the detection unit 210, it acquires the functional unit information of the new functional unit indicated by the detection information, and also acquires the functional unit information of the existing functional unit.

The generation unit 220 generates new network configuration information based on the acquired functional unit information.

For example, the generation unit 220 acquires information that allows the topology of hardware devices such as the in-vehicle ECU 111, the relay device 112, and the external device 113 in the new network to be recognized as the functional unit information. Furthermore, for example, the generation unit 220 acquires, as functional unit information, information that allows recognition of constraints regarding placement of the application 100 on hardware devices in the new network. Further, for example, the generation unit 220 acquires information that allows recognition of constraints on communication methods between the applications 100.

The generation unit 220 generates, for example, vehicle information indicating the manufacturer and model of the vehicle 1 in which the in-vehicle ECU 111 and the relay device 112 are installed, and additional options installed in the vehicle 1, as information that can recognize the topology of the hardware device. information on the additional option information shown, the in-vehicle device ID which is an identifier indicating the manufacturer and serial number of the in-vehicle ECU 111, the port number of the communication port in the connection between the hardware devices, and the bandwidth of the communication path between the hardware devices. do.

The generation unit 220 obtains, for example, the ID of the application 100 as information that allows recognition of constraints regarding placement of the application 100 on a hardware device.

The generation unit 220 acquires information indicating a communication standard used for communication between the applications 100, such as Ethernet and CAN, as information that allows the restriction of the communication method between the applications 100 to be recognized.

For example, the generation unit 220 transmits an information request notification indicating the type of functional unit information to be transmitted among the types of functional unit information as described above to the existing functional unit and the new functional unit.

As a response to the information request notification received from the generation unit 220, the existing function unit and the new function unit transmit, for example, their own function unit information of the type specified in the information request notification to the generation unit 220.

Upon receiving the functional unit information from the existing functional unit and the new functional unit, the generating unit 220 generates new network configuration information based on the received functional unit information.

More specifically, the generation unit 220 generates information that can specify functional units in the vehicle 1 and the new network as configuration information.

Note that the generation unit 220 acquires the configuration information of the existing network as the functional unit information of each existing functional unit, and generates the configuration information of the new network based on the acquired configuration information of the existing network and the functional unit information of the new functional unit. The configuration may also be such that the information is generated.

More specifically, the storage unit 240 may store configuration information of an existing network.

The generation unit 220 refers to the storage unit 240 and, if the configuration information of the existing network is registered in the storage unit 240, acquires the configuration information from the storage unit 240. In this case, the generation unit 220 transmits the information request notification to the new functional unit but does not transmit it to the existing functional unit.

Upon receiving the functional unit information from the new functional unit, the generating unit 220 generates new network configuration information based on the received functional unit information of the new functional unit and the existing network configuration information acquired from the storage unit 240. . Specifically, the generation unit 220 generates new network configuration information by modifying the existing network configuration information acquired from the storage unit 240 using the received function unit information of the new function unit. The generation unit 220 updates the configuration information in the storage unit 240 with the generated new configuration information.

The generation unit 220 outputs the generated new network configuration information to the acquisition unit 230.

[Acquisition part]
The acquisition unit 230 acquires feasibility information indicating the feasibility of a new network corresponding to the configuration information generated by the generation unit 220 from the database in the storage device.

More specifically, the acquisition unit 230 acquires, as feasibility information, success/failure information indicating the success or failure of the new network, and setting information indicating the settings for communicating in the new network.

FIG. 8 is a diagram showing a configuration of a server in a communication system according to an embodiment of the present disclosure.

Referring to FIG. 8, server 180 includes a storage device 181, a database processing section 182, an updating section 183, and a verification section 184.

For example, the storage device 181 stores a success/failure database that associates configuration information of the network 12 with success/failure information indicating the success or failure of the network 12.

Upon receiving the new network configuration information from the generation unit 220, the acquisition unit 230 acquires success/failure information corresponding to the configuration information from the success/failure database in the storage device 181 by communicating with the server 180 via the TCU 111A. .

More specifically, the acquisition unit 230 transmits the configuration information received from the generation unit 220 to the database processing unit 182 in the server 180.

The database processing unit 182 uses the configuration information received from the acquisition unit 230 as a search key to acquire corresponding success/failure information from the success/failure database. The database processing unit 182 transmits the acquired success/failure information to the acquisition unit 230 in the management unit 200.

FIG. 9 is a diagram illustrating an example of a success/failure database stored in a storage device in a communication system according to an embodiment of the present disclosure.

In the following, for convenience, the ID of application A is "ID-A", the ID of application B is "ID-B", the ID of application C is "ID-C", and the ID of application D is "ID-A". ID-D", the ID of application E is "ID-E", the ID of application F is "ID-F", the ID of application G is "ID-G", and the ID of application H It is assumed that the ID of the application 100J is "ID-H" and the ID of the application 100J is "ID-J".

Referring to FIG. 8, the success/failure database in the storage device 181 includes vehicle information, configuration information indicating a combination of the ID of the application 100 in the existing network and the ID of the application 100 to be added, and a new network indicated by the configuration information. Success/failure information is registered in association with the success/failure information.

In this example, for convenience, it is assumed that the topology of the hardware devices, the bandwidth of the communication path between the hardware devices, etc. can be specified based on the vehicle information and the ID of the application 100.

In the success/failure database, the success/failure information indicates, for example, "success" or "failure".

In the success/failure database, if the success/failure information corresponding to the configuration information of a new network indicates "success", it means that the new network will be established; if the success/failure information indicates "failure", it means that the new network will not be established. In addition, "unverified" in the success/failure database means that the success or failure of the new network has not been verified and no success/failure information exists.

The acquisition unit 230 receives configuration information indicating a combination of the vehicle information and the ID of the application 100 in the existing network and the ID of the application 100 to be added from the generation unit 220, and sends the received configuration information to the database processing unit 182 in the server 180. Send.

For example, the database processing unit 182 determines that the manufacturer of the vehicle 1 is "Company A," the vehicle type is "aaaa," and the IDs of the application 100 in the existing network are "ID-A," "ID-B," and "ID-A." -C" and the ID of the application 100 to be added is "ID-G" from the acquisition unit 230. Then, the database processing unit 182 uses the received configuration information as a search key to acquire success/failure information indicating “success” from the success/failure database, and transmits the acquired success/failure information to the acquisition unit 230.

For example, the acquisition unit 230 further acquires setting information indicating settings for communicating in the new network.

More specifically, the acquisition unit 230 acquires setting information indicating the settings of each functional unit for each functional unit to perform communication at layer 4 and below in the OSI (Open Systems Interconnection) reference model in the new network.

For example, the storage device 181 stores a settings database that associates configuration information of the network 12 with settings of functional units in the network 12.

FIG. 10 is a diagram illustrating an example of a setting database stored in a storage device in a communication system according to an embodiment of the present disclosure.

In the following, for convenience, the port numbers of the communication ports 120A, 120B, and 120C of the relay device 112 are assumed to be "1," "2," and "3," respectively. Furthermore, it is assumed that the in-vehicle ECU 111 includes one communication port, and the port number of the communication port is "1".

Referring to FIG. 10, in the configuration database in the storage device 181, for example, a configuration ID and the configuration contents of each functional unit in the network 12 indicated by the configuration ID, such as the VLAN ID for each communication port 120, are registered. . Hereinafter, the VLAN ID will also be referred to as "VID".

Referring to FIGS. 9 and 10, when the database processing unit 182 obtains success/failure information indicating "success" from the success/failure database as the success/failure information corresponding to the configuration information with the configuration ID "00001", As the setting information "00001", the VID of each functional unit is acquired from the setting database.

For example, the success/failure information in the success/failure database and the setting information in the setting database are generated based on results verified in advance in consideration of the logical configuration and physical configuration of the network indicated by each piece of configuration information.

The database processing unit 182 transmits the acquired setting information to the acquisition unit 230.

For example, upon acquiring feasibility information from the database in the storage device 181 as described above, the acquisition section 230 registers the configuration information generated by the generation section 220 and the feasibility information corresponding to the configuration information in the storage section 240. do.

(Operation example 1)
Upon acquiring success/failure information indicating “success” and setting information as feasibility information, the acquisition unit 230 outputs the acquired success/failure information and setting information to the notification unit 250 .

When the notification unit 250 receives the feasibility information from the acquisition unit 230, the notification unit 250 sends at least one of the functional units in the new network settings for communicating in the new network based on the received feasibility information. Notify.

More specifically, the notification unit 250 selects a functional unit whose settings need to be changed in order to communicate in the new network, from one or more existing functional units included in the existing network and the new functional unit. Specify the settings and notify the specified functional unit of the settings.

For example, upon receiving the configuration information from the acquisition unit 230, the notification unit 250 acquires from the storage unit 240 configuration information indicating the settings of each functional unit in the existing network. Then, the notification unit 250 compares the configuration information received from the acquisition unit 230 and the configuration information acquired from the storage unit 240, and determines whether or not the configuration information needs to be changed in order to perform communication in the new network. Identify the functional parts of. The notification unit 250 transmits the setting information received from the acquisition unit 230 to the specified functional unit.

For example, if there is no functional unit whose settings need to be changed in the new network, the notification unit 250 does not send configuration information to the functional unit.

When one or more functional units in the new network receive the setting information from the notification unit 250, they change settings based on the received setting information. Each functional unit in the new network communicates with each other according to the changed settings.

For example, in the example shown in FIG. 10, the acquisition unit 230 determines that the ID of the VLAN to which the image sensor 111G including the application 100G, which is a new functional unit, belongs is “VLAN20”, and that the ID of the VLAN to which the image sensor 111G including the application 100G, which is a new function unit, belongs is “VLAN20”, and Setting information indicating that the ID of the corresponding VLAN is "VLAN20" is acquired.

The acquisition unit 230 outputs the acquired setting information to the notification unit 250. The notification unit 250 notifies the image sensor 111G and the relay device 112 of the settings based on the setting information received from the acquisition unit 230.

FIG. 11 is a diagram illustrating another example of the configuration of a new network after setting changes in the vehicle communication system according to the embodiment of the present disclosure.

Referring to FIG. 11, in the new network shown in FIG. 5, image sensor 111G and relay device 112 change settings based on the settings notified from notification unit 250. This enables the image sensor 111G to perform communication in the VLAN 20.

Further, when an abnormality occurs in the new network, the notification unit 250 transmits abnormality detection information indicating that an abnormality has occurred to the server 180.

For example, a functional unit in the new network, such as the application 100, sends an error log to the abnormality detection unit 260 when an abnormality such as a packet loss occurs in the new network.

Upon receiving the error log, the abnormality detection unit 260 notifies the notification unit 250 that the error log has been received.

Upon receiving the notification from the abnormality detection unit 260, the notification unit 250 acquires configuration information of the new network from the storage unit 240, and sends the acquired configuration information and abnormality detection information indicating that an abnormality has occurred via the wireless base station device 161. and sends it to the server 180.

Upon receiving the anomaly detection information from the notification section 250, the update unit 183 in the server 180 updates the database in the storage device 181 based on the received anomaly detection information. Specifically, the updating unit 183 changes the success/failure information corresponding to the configuration information indicated by the abnormality detection information from "success" to "failure" in the success/failure database, for example.

(Operation example 2)
Upon acquiring success/failure information indicating “failure” as feasibility information, the acquisition unit 230 outputs the acquired success/failure information to the generation unit 220 .

When the generation unit 220 receives success/failure information indicating “failure” as feasibility information from the acquisition unit 230, the generation unit 220 changes the generation conditions based on the received feasibility information, and newly generates configuration information according to the changed generation conditions. do.

For example, the generation unit 220 changes the current generation conditions to generation conditions that do not add some of the new functional units to the network 12, and updates the configuration information of the new network according to the changed generation conditions. to be generated.

For example, the generation unit 220 changes the generation condition by changing the functional arrangement between the functional units in the current generation condition, and newly generates the configuration information of the new network according to the changed generation condition.

The generation unit 220 outputs the newly generated configuration information of the new network to the acquisition unit 230.

Upon receiving the configuration information newly generated by the generation unit 220, the acquisition unit 230 acquires success/failure information corresponding to the received configuration information from the success/failure database in the storage device 181.

(Operation example 3)
Upon acquiring success/failure information indicating “unverified” as feasibility information, the acquisition unit 230 transmits corresponding configuration information to the verification unit 184 in the server 180 via the wireless base station device 161.

Upon receiving the configuration information from the acquisition unit 230, the verification unit 184 verifies the validity of the received configuration information. For example, the verification unit 184 determines whether the new network indicated by the received configuration information is successful or not by simulating the new network.

The verification unit 184 generates feasibility information of the configuration information, and transmits the generated feasibility information to the acquisition unit 230 via the radio base station device 161 as a verification result. Further, the verification unit 184 outputs the configuration information and the feasibility information corresponding to the configuration information to the update unit 183.

For example, the update unit 183 in the server 180 updates the success/failure database and the setting database in the storage device 181.

More specifically, the update unit 183 registers the configuration information received from the verification unit 184 and feasibility information corresponding to the configuration information in the success/failure database and the setting database in the storage device 181.

Further, for example, a worker at the manufacturer of the vehicle 1 designs and verifies a new network 12 that includes a newly developed functional unit. The operator generates feasibility information for the new network 12 by verifying the new network 12, and performs an operation to input the generated feasibility information and configuration information corresponding to the feasibility information to the updating unit 183.

The update unit 183 registers the configuration information and feasibility information input by the operator in the success/failure database and the setting database in the storage device 181.

Further, for example, the operator performs an operation to input configuration information of a new network 12 including a newly developed functional unit to the verification unit 184. The verification unit 184 generates feasibility information of the configuration information input by the operator, and outputs the configuration information and the generated feasibility information to the update unit 183. The update unit 183 registers the configuration information received from the verification unit 184 and feasibility information corresponding to the configuration information in the success/failure database and the setting database in the storage device 181.

[Flow of operation]
Each device in the vehicle communication system 300 is equipped with a computer including a memory, and an arithmetic processing unit such as a CPU in the computer reads a program including a part or all of each step of the following flowchart and sequence from the memory and executes it. do. The programs for these multiple devices can be installed from outside. The programs for these plurality of devices are stored in respective recording media and distributed.

FIG. 12 is a flowchart that defines the operational procedure when the management unit constructs a new network in the communication system according to the embodiment of the present disclosure.

Referring to FIG. 12, first, the management unit 200 waits for the addition of a new functional unit to the network 12 (NO in step S102), and when a new functional unit is detected (YES in step S102), the management unit 200 The functional unit information is acquired (step S104).

Next, the management unit 200 acquires functional unit information of the existing functional unit (step S106).

Next, the management unit 200 generates new network configuration information based on the acquired functional unit information of the new functional unit and the existing functional unit (step S108).

Next, the management unit 200 acquires success/failure information corresponding to the generated configuration information from the success/failure database in the storage device 181 of the server 180 (step S110).

Next, if the acquired success/failure information indicates "successful" (YES in step S112), the management unit 200 retrieves the settings indicating the settings for communicating in the new network from the settings database in the storage device 181 of the server 180. Information is acquired (step S114).

Next, the management unit 200 transmits the acquired setting information to one or more functional units in the new network (step S116).

Next, the management unit 200 waits for a new functional unit to be added to the new network (NO in step S102).

On the other hand, if the acquired success/failure information indicates "failure" (NO in step S112 and YES in step S118), the management unit 200 changes the configuration information generation condition and updates the configuration information according to the changed generation condition. (step S120).

Next, the management unit 200 acquires success/failure information corresponding to the newly generated configuration information from the success/failure database in the storage device 181 of the server 180 (step S110).

On the other hand, if the success/failure information in the success/failure database does not exist (NO in step S112 and NO in step S118), the management unit 200 transmits the configuration information to the verification unit 184 in the server 180, and the verification unit 184 sends the configuration information to the verification unit 184. Information is received (step S122).

Next, for example, if the success/failure information included in the received feasibility information indicates "established" (YES in step S112), the management unit 200 acquires the setting information included in the feasibility information (step S114), and The configured setting information is transmitted to one or more functional units in the new network (step S116).

Next, the management unit 200 waits for a new functional unit to be added to the new network (NO in step S102).

FIG. 13 is a diagram illustrating an example of a sequence of new network construction processing in the communication system according to the embodiment of the present disclosure.

Referring to FIG. 13, first, a new functional unit newly added to network 12 transmits connection request information to management unit 200 (step S202).

Next, upon receiving the connection request information from the new functional unit, the management unit 200 detects the new functional unit and performs authentication processing for the new functional unit (step S204).

Next, when the management unit 200 successfully authenticates the new functional unit, it transmits an information request notification for requesting functional unit information to the existing functional unit and the new functional unit (step S206).

Next, the new functional unit and the existing functional unit transmit their own functional unit information of the type specified in the information request notification to the management unit 200 as a response to the information request notification (step S208).

Next, the management unit 200 generates new network configuration information based on the functional unit information received from the existing functional unit and the new functional unit (step S210).

Next, the management unit 200 transmits the generated configuration information to the server 180 via the wireless base station device 161 (step S212).

Next, the server 180 obtains feasibility information indicating the feasibility of a new network corresponding to the configuration information received from the management unit 200 from the database, and transmits the obtained feasibility information to the management unit via the wireless base station device 161. 200 (step S214).

Next, the management unit 200 registers the generated configuration information and feasibility information received from the server 180 in the storage unit 240 (step S216).

Next, if the feasibility information includes success/failure information indicating "success/failure" and setting information, the management section 200 transmits the setting information to the existing functional section and the new functional section (step S218).

Next, the new function unit changes settings based on the setting information received from the management unit 200 (step S220).

Furthermore, the existing functional unit changes settings based on the setting information received from the management unit 200 (step S222).

Next, the new functional unit and the existing functional unit in the new network communicate with each other according to the changed settings (step S224).

FIG. 14 is a diagram illustrating another example of the sequence of the new network construction process in the communication system according to the embodiment of the present disclosure.

Referring to FIG. 14, first, a new functional unit newly added to network 12 transmits connection request information to management unit 200 (step S302).

Next, upon receiving the connection request information from the new functional unit, the management unit 200 detects the new functional unit and performs authentication processing for the new functional unit (step S304).

Next, when the management unit 200 successfully authenticates the new functional unit, it transmits an information request notification to request functional unit information to the new functional unit (step S306).

Next, the new functional unit transmits its own functional unit information of the type specified in the information request notification to the management unit 200 as a response to the information request notification (step S308).

Next, the management unit 200 acquires configuration information of the existing network from the storage unit 240 (step S310).

Next, the management unit 200 generates new network configuration information based on the functional unit information received from the new functional unit and the configuration information acquired from the storage unit 240 (step S312).

Next, the management unit 200, the new function unit, the existing function unit, and the server 180 perform the same processes as steps S212 to S224 in FIG. 12 as processes from step S314 to step S326.

FIG. 15 is a diagram illustrating another example of the sequence of the new network construction process in the communication system according to the embodiment of the present disclosure.

The processing from step S402 to step S414 in FIG. 15 is similar to the processing from step S202 to step S214 in FIG. 12.

Next to step S414, if the feasibility information includes success/failure information indicating "failure", the management unit 200 changes the configuration information generation condition and newly generates configuration information according to the changed generation condition (step S416).

Next, the management unit 200 transmits the newly generated configuration information to the server 180 via the wireless base station device 161 (step S418).

Next, the server 180 obtains feasibility information indicating the feasibility of a new network corresponding to the configuration information received from the management unit 200 from the database, and transmits the obtained feasibility information to the management unit via the wireless base station device 161. 200 (step S420).

Next, the management unit 200, the new function unit, and the existing function unit perform the same processes as steps S216 to S224 in FIG. 12 as processes from step S422 to step S430.

FIG. 16 is a diagram illustrating another example of the sequence of the new network construction process in the communication system according to the embodiment of the present disclosure.

The processing from step S502 to step S514 in FIG. 16 is similar to the processing from step S202 to step S214 in FIG. 12.

After step S514, if the success/failure information in the success/failure database does not exist, the management unit 200 transmits the corresponding configuration information to the server 180 via the wireless base station device 161 (step S516).

Next, the server 180 verifies the validity of the configuration information received from the management unit 200 (step S518).

Next, the server 180 generates feasibility information of the configuration information, and transmits the generated feasibility information as a verification result to the management unit 200 via the wireless base station device 161 (step S520).

Next, the management unit 200, the new function unit, and the existing function unit perform processes similar to steps S216 to S224 in FIG. 13 or steps S416 to S430 in FIG. 15 as processes from step S522 to step S530.

FIG. 17 is a diagram illustrating another example of the sequence of the new network construction process in the communication system according to the embodiment of the present disclosure.

The processing from step S602 to step S624 in FIG. 17 is similar to the processing from step S202 to step S224 in FIG. 12.

After step S624, the management unit 200 detects an abnormality that has occurred in the new network (step S626).

Next, the management unit 200 acquires configuration information of the new network from the storage unit 240 (step S628).

Next, the management unit 200 transmits the acquired configuration information and abnormality detection information indicating that an abnormality has occurred to the server 180 via the wireless base station device 161 (step S630).

Next, the server 180 updates the database in the storage device 181 based on the abnormality detection information received from the management unit 200 (step S632).

Note that in the management unit 200 according to the embodiment of the present disclosure, when the in-vehicle ECU 111 or an external device is added to the network 12, the detection unit 210 adds a new function to the application 100 included in the in-vehicle ECU 111 or the external device. However, the present invention is not limited to this configuration. The detection unit 210 may be configured to detect an in-vehicle ECU 111 or an external device that is added to the network 12 and is not equipped with the application 100 as a new functional unit.

Furthermore, in the management unit 200 according to the embodiment of the present disclosure, when the success/failure information in the success/failure database of the storage device 181 indicates “unverified”, the acquisition unit 230 transmits the corresponding configuration information to the verification unit 184 in the server 180. Although the configuration has been described in which the correspondence information is transmitted and the corresponding feasibility information is received from the verification unit 184, the present invention is not limited to this. The acquisition unit 230 acquires success/failure information indicating “re-verification required” from the success/failure database, or when the configuration information generated by the generation unit 220 is not registered in the success/failure database and the success/failure information cannot be acquired. , the configuration information of the correspondence may be transmitted to the verification unit 184 in the server 180, and the validity information of the correspondence may be received from the verification unit 184.

Further, in the management unit 200 according to the embodiment of the present disclosure, the acquisition unit 230 receives success/failure information and setting information transmitted from the server 180 and outputs it to the notification unit 250. Although the configuration has been described above in which setting information received from the network is sent to each functional unit in the new network to cause each functional unit to change settings, the present invention is not limited to this. The server 180 may be configured not to send setting information to the acquisition unit 230. In this case, the management section 200 may be configured without the notification section 250.

Further, in the management unit 200 according to the embodiment of the present disclosure, when the generation unit 220 receives success/failure information indicating “unsatisfied” from the acquisition unit 230, the generation unit 220 changes the configuration information generation condition, and according to the changed generation condition. Although the configuration has been described in which configuration information is newly generated, the present invention is not limited to this. The generation unit 220 may be configured not to generate new configuration information even if it receives success/failure information indicating “failure”. In this case, for example, the notification unit 250 notifies the new functional unit that the new functional unit will not be added to the network 12.

In addition, in the management unit 200 according to the embodiment of the present disclosure, when the generation unit 220 acquires the configuration information of the existing network from the storage unit 240, the generation unit 220 generates the functional unit information of the new function unit and the acquired configuration information of the existing network. Although it has been described that the configuration information of the new network is generated based on the above, the present invention is not limited to this. Even if the generation unit 220 acquires the configuration information of the existing network from the storage unit 240, the generation unit 220 acquires the functional unit information from one or more existing functional units depending on the content of the functional unit information of the new functional unit. , the configuration information of the new network may be generated based on the functional unit information of the new functional unit, the functional unit information of the existing functional unit, and the acquired configuration information of the existing network.

Furthermore, in the management unit 200 according to the embodiment of the present disclosure, the notification unit 250 selects a function whose settings need to be changed from one or more existing function units included in the existing network and a new function unit. Although the present invention has been described as having a configuration in which the specified functional unit is specified and the setting contents are notified to the specified functional unit, the present invention is not limited to this. The notification unit 250 may be configured to notify all the functional units in the new network of the setting content without specifying the functional unit whose setting content needs to be changed.

Further, in the communication system 400 according to the embodiment of the present disclosure, the management unit 200 is configured to be included in the relay device 112 in the network 12, but the configuration is not limited to this. A part or all of each unit in the management section 200 may be included in a device other than the relay device 112 in the network 12, or may be provided outside the network 12. Note that the configuration in which the management unit 200 is included in the relay device 112 in a star topology as shown in FIG. 2, for example, allows the management unit 200 to perform each of the above processes more efficiently.

Further, the management unit 200 may be realized by the server 180. In this case, part or all of the functions of the management unit 200 according to the embodiment of the present disclosure may be provided by cloud computing. That is, the management unit 200 according to the embodiment of the present disclosure may be configured by a plurality of cloud servers or the like.

Further, in the communication system 400 according to the embodiment of the present disclosure, when an abnormality occurs in the new network, the notification unit 250 in the management unit 200 transmits abnormality detection information to the update unit 183 in the server 180, and updates the server 180. Although the configuration is such that the unit 183 updates the database based on the abnormality detection information received from the notification unit 250, the present invention is not limited to this. The notification unit 250 may be configured not to transmit abnormality detection information to the update unit 183. In this case, the management section 200 may be configured without the abnormality detection section 260.

By the way, there is a need for a technology that can flexibly construct a network with a new configuration while maintaining stable operation in the network.

For example, when constructing a new network by adding a new functional unit to the network, communication required by the upper layer may not be realized due to the network configuration and restrictions of the lower layer.

An example of such lower layer network configurations and constraints is physical layer communication band constraints. In particular, networks that require low cost, such as networks that include in-vehicle functional units such as in-vehicle ECUs, are subject to the communication band constraints described above, so it is difficult to add new features to the network while maintaining stable network operation. It may be difficult to add functional units.

In contrast, in the relay device 112 according to the embodiment of the present disclosure, the detection unit 210 detects the addition of a functional unit to a network that includes one or more in-vehicle functional units. The generation unit 220 acquires the function unit information of the new function unit whose addition is detected by the detection unit 210 and the function unit information of the in-vehicle function unit, and generates the new function based on the acquired function unit information. The configuration information of a new network, which is a network 12 further including a section, is generated. The acquisition unit 230 acquires feasibility information indicating the feasibility of a new network, which corresponds to the configuration information generated by the generation unit 220, from the database in the storage device 181.

In this way, with the configuration that generates the configuration information of a new network including the detected new functional unit and obtains the feasibility information indicating the feasibility of the new network from the database, the feasibility information of the network generated in advance is obtained. A new network can be constructed using the verification results. As a result, it is possible to construct a new network whose feasibility is guaranteed by taking into consideration the logical and physical configurations. This makes it possible to suppress the occurrence of delays in communication.

Therefore, in the relay device 112 according to the embodiment of the present disclosure, it is possible to flexibly construct a network with a new configuration while maintaining stable operation in the network.

Furthermore, in the relay device 112 according to the embodiment of the present disclosure, the notification unit 250 transmits a new function unit and one or more in-vehicle function units that configure a new network based on the feasibility information acquired by the acquisition unit 230. At least one of them is notified of the settings for communicating in the new network.

With such a configuration, the setting contents of each functional unit can be changed to appropriate contents according to the specifications regarding communication in the new network, for example, the topology.

Further, in the relay device 112 according to the embodiment of the present disclosure, the notification unit 250 selects a new functional unit from among one or more functional units included in the network 12 before the new functional unit is added, and the new functional unit. A functional unit whose settings need to be changed in order to communicate on a network is identified, and the settings are notified to the identified functional unit.

With such a configuration, for example, it is possible to notify the setting contents to a functional section whose setting contents need to be changed, while omitting notification of the setting contents to a functional section whose setting contents do not need to be changed. Therefore, unnecessary communication between the relay device 112 and the functional units can be suppressed.

Further, in the relay device 112 according to the embodiment of the present disclosure, the generation unit 220 changes the generation condition based on the feasibility information acquired by the acquisition unit 230, and newly generates the configuration information according to the changed generation condition. generate.

With such a configuration, if it is difficult to establish a new network, for example, the configuration information of a new network that has been changed by adding a new functional part to the network can be newly generated, and the feasibility information of the new network after the change can be generated. can be obtained. This enables more flexible construction of new networks.

Furthermore, in the relay device 112 according to the embodiment of the present disclosure, the storage unit 240 stores the configuration information generated by the generation unit 220 and feasibility information corresponding to the configuration information.

With this configuration, when adding a new functional unit to the network and building a new network, the configuration information of the existing network can be retrieved from the storage unit, which simplifies the network building process. can.

The vehicle 1 according to the embodiment of the present disclosure also includes a relay device 112.

With such a configuration, in the vehicle 1 including the relay device 112, a network with a new configuration can be flexibly constructed while maintaining stable operation in the network.

Furthermore, the communication system 400 according to the embodiment of the present disclosure includes a relay device 112 and one or more in-vehicle functional units that configure a network. The relay device 112 detects the addition of a functional unit to the network 12 and acquires functional unit information from the new functional unit that is the functional unit whose addition has been detected. One or more in-vehicle functional units transmit their own functional unit information to relay device 112. The relay device 112 generates configuration information of a new network, which is a network 12 that further includes the new function unit, based on the function unit information acquired from the new function unit and the function unit information received from one or more in-vehicle function units. do. The relay device 112 acquires feasibility information indicating the feasibility of a new network corresponding to the generated configuration information from the database in the storage device 181.

In this way, the configuration that generates the configuration information of a new network including the detected new functional unit and obtains the feasibility information indicating the feasibility of the new network from the database enables verification of the feasibility of the network that has been verified in advance. The results can be used to build new networks. As a result, it is possible to construct a new network whose feasibility is guaranteed by taking into consideration the logical and physical configurations, thereby suppressing the occurrence of communication delays caused by adding new functional units to the network. can do.

Therefore, in the communication system 400 according to the embodiment of the present disclosure, it is possible to flexibly construct a network with a new configuration while maintaining stable operation in the network.

Furthermore, in the communication system 400 according to the embodiment of the present disclosure, the update unit 183 updates the database in the storage device 181.

With such a configuration, new combinations of network configuration information and feasibility information can be registered in the database, making it possible to construct a variety of networks.

Furthermore, in the communication system 400 according to the embodiment of the present disclosure, upon detecting an abnormality in the new network, the relay device 112 sends configuration information of the new network and abnormality detection information indicating that an abnormality has occurred to the update unit 183. Send. The update unit 183 updates the database based on the abnormality detection information received from the relay device 112.

With such a configuration, the occurrence of an abnormality in the new network can be reflected in the database, so it is possible to construct a more stable new network using the updated database.

In addition, in the communication system 400 according to the embodiment of the present disclosure, the verification unit 184 determines whether feasibility information corresponding to the configuration information generated by the relay device 112 exists in the database. Verify the validity of configuration information.

With such a configuration, if the feasibility of the new network has not been verified in advance, the feasibility information of the new network can be acquired through new verification, and construction of the new network can be attempted.

Further, the vehicle communication management method according to the embodiment of the present disclosure is a vehicle communication management method in the relay device 112. In this vehicle communication management method, first, the relay device 112 detects the addition of a functional unit to the network 12 that includes one or more in-vehicle functional units. Next, the relay device 112 acquires the functional unit information of the new functional unit, which is the functional unit whose addition has been detected, and the functional unit information of the in-vehicle functional unit, and further adds the new functional unit based on the acquired functional unit information. The configuration information of a new network, which is the network 12 including the network 12, is generated. Next, the relay device 112 acquires feasibility information indicating the feasibility of a new network corresponding to the generated configuration information from the database in the storage device 181.

In this way, with the configuration that generates the configuration information of a new network including the detected new functional unit and obtains the feasibility information indicating the feasibility of the new network from the database, the feasibility information of the network generated in advance is obtained. A new network can be constructed using the verification results. As a result, it is possible to construct a new network whose feasibility is guaranteed by taking into consideration the logical and physical configurations. This makes it possible to suppress the occurrence of delays in communication.

Therefore, in the vehicle communication management method according to the embodiment of the present disclosure, it is possible to flexibly construct a network with a new configuration while maintaining stable operation in the network.

Further, the vehicle communication management method according to the embodiment of the present disclosure is a vehicle communication management method in a vehicle communication system 300 that includes a relay device 112 and one or more in-vehicle functional units that configure the network 12. In this vehicle communication management method, first, the relay device 112 detects the addition of a functional unit to the network 12, and acquires functional unit information from the new functional unit that is the functional unit whose addition has been detected. Next, one or more in-vehicle functional units transmit their own functional unit information to relay device 112. Next, the relay device 112 establishes a new network, which is the network 12 further including the new function unit, based on the function unit information acquired from the new function unit and each function unit information received from one or more in-vehicle function units. Generate configuration information. Next, the relay device 112 acquires feasibility information indicating the feasibility of a new network corresponding to the generated configuration information from the database in the storage device 181.

In this way, with the configuration that generates the configuration information of a new network including the detected new functional unit and obtains the feasibility information indicating the feasibility of the new network from the database, the feasibility information of the network generated in advance is obtained. A new network can be constructed using the verification results. As a result, it is possible to construct a new network whose feasibility is guaranteed by taking into consideration the logical and physical configurations. This makes it possible to suppress the occurrence of delays in communication.

Therefore, in the vehicle communication management method according to the embodiment of the present disclosure, it is possible to flexibly construct a network with a new configuration while maintaining stable operation in the network.

The above embodiments should be considered to be illustrative in all respects and not restrictive. The scope of the present invention is indicated by the claims rather than the above description, and it is intended that equivalent meanings and all changes within the scope of the claims are included.

The above description includes the features noted below.
[Additional note 1]
a detection unit that detects a new functional unit that is newly added to a network that includes one or more in-vehicle functional units;
The network further includes the new functional unit by acquiring the functional unit information of the new functional unit and the functional unit information of the in-vehicle functional unit detected by the detection unit, and based on the acquired functional unit information, the network further includes the new functional unit. a generation unit that generates configuration information of a new network;
an acquisition unit that acquires feasibility information indicating the feasibility of the new network, which is acquired from a database in a storage device by using the configuration information generated by the generation unit as a search key;
The acquisition unit selects the feasibility information generated by the generation unit from the database that stores the plurality of feasibility information generated by verifying in advance in consideration of the logical configuration and physical configuration of the plurality of networks. A management device that acquires the feasibility information corresponding to configuration information.

[Additional note 2]
a management device;
one or more in-vehicle functional units forming a network;
and a new functional unit that is a newly added functional unit to the network,
The management device detects addition of the new functional unit to the network,
The new functional unit and the one or more in-vehicle functional units transmit their own functional unit information to the management device,
The management device generates configuration information of a new network, which is the network further including the new function unit, based on each function unit information received from the new function unit and the one or more in-vehicle function units,
The management device acquires feasibility information indicating feasibility of the new network, which is obtained by using the generated configuration information as a search key, from a database in a storage device,
The management device selects the feasibility information generated by the generation unit from the database that stores a plurality of feasibility information generated by verifying in advance in consideration of the logical configuration and physical configuration of the plurality of networks. A communication system that acquires the feasibility information corresponding to configuration information.

[Additional note 3]
A management device comprising a processor,
The processor includes:
a detection unit that detects a new ECU, which is a functional unit newly added to a network including one or more in-vehicle ECUs;
The functional unit information of the new ECU and the functional unit information of the in-vehicle ECU detected by the detection unit are acquired, and based on the acquired functional unit information, a new network that is the network further including the new ECU is determined. a generation unit that generates configuration information;
an acquisition unit that acquires feasibility information indicating feasibility of the new network corresponding to the configuration information generated by the generation unit from a database in a storage device;
A management device that realizes this.

[Additional note 4]
a management device;
One or more in-vehicle ECUs forming a network;
and a new ECU, which is a functional unit newly added to the network,
The management device detects addition of the new ECU to the network,
The new ECU and one or more of the in-vehicle ECUs transmit their own functional unit information to the management device,
The management device generates configuration information of a new network, which is the network further including the new ECU, based on the functional unit information received from the new ECU and one or more of the in-vehicle ECUs,
In the communication system, the management device acquires feasibility information indicating feasibility of the new network corresponding to the generated configuration information from a database in a storage device.

1 vehicle 10 VLAN
11 Ethernet cable 12 Network 20 VLAN
30 VLANs
100 Application 111 Automotive ECU
112 Relay device 113 External device 161 Wireless base station device 170 External network 180 Server 181 Storage device 182 Database processing section 183 Update section 184 Verification section 200 Management section 210 Detection section 220 Generation section 230 Acquisition section 240 Storage section 250 Notification section 260 Abnormality detection Section 300 Vehicle communication system 400 Communication system

Claims (13)

a detection unit that detects addition of a functional unit to a network including one or more in-vehicle functional units;
The functional unit information of the new functional unit, which is the functional unit whose addition has been detected by the detection unit, and the functional unit information of the in-vehicle functional unit are acquired, and based on the acquired functional unit information, the new functional unit a generation unit that generates configuration information of a new network that is the network further including;
A management device comprising: an acquisition unit that acquires feasibility information indicating feasibility of the new network, which corresponds to the configuration information generated by the generation unit, from a database in a storage device. The management device further includes:
Based on the feasibility information acquired by the acquisition unit, at least one of the new function unit and one or more in-vehicle function units that configure the new network is configured to communicate in the new network. The management device according to claim 1, further comprising a notification unit that notifies setting contents to be performed. The notification unit changes settings for communication in the new network from among one or more functional units included in the network before the new functional unit is added and the new functional unit. The management device according to claim 2, which specifies the necessary functional unit and notifies the specified functional unit of the setting contents. Any one of claims 1 to 3, wherein the generation unit changes generation conditions based on the feasibility information acquired by the acquisition unit, and newly generates the configuration information according to the changed generation conditions. The management device according to item 1. The management device further includes:
The management device according to any one of claims 1 to 4, further comprising a storage unit that stores the configuration information generated by the generation unit and the feasibility information corresponding to the configuration information. A vehicle comprising the management device according to any one of claims 1 to 5. a management device;
and one or more in-vehicle functional units constituting a network,
The management device detects addition of a functional unit to the network, and acquires functional unit information from a new functional unit that is the functional unit whose addition is detected,
The one or more in-vehicle functional units transmit their own functional unit information to the management device,
Based on the functional unit information acquired from the new functional unit and the functional unit information received from one or more of the in-vehicle functional units, the management device creates a new network that is the network further including the new functional unit. generate configuration information for
In the communication system, the management device acquires feasibility information indicating feasibility of the new network corresponding to the generated configuration information from a database in a storage device. The communication system further includes:
The communication system according to claim 7, further comprising an update unit that updates the database in the storage device. When the management device detects an abnormality in the new network, the management device transmits abnormality detection information indicating that the abnormality has occurred in the new network to the update unit,
The communication system according to claim 8, wherein the update unit updates the database based on the abnormality detection information received from the management device. The communication system further includes:
Claim comprising: a verification unit that verifies the feasibility of the configuration information generated by the management device when the feasibility information corresponding to the configuration information generated by the management device does not exist in the database. The communication system according to any one of claims 7 to 9. A vehicle communication management method in a management device, the method comprising:
detecting the addition of a feature to a network including one or more in-vehicle features;
Functional unit information of the new functional unit, which is the functional unit whose addition has been detected, and functional unit information of the in-vehicle functional unit are acquired, and based on the acquired functional unit information, the network further includes the new functional unit. a step of generating configuration information for a new network,
A vehicle communication management method comprising the step of acquiring feasibility information indicating feasibility of the new network corresponding to the generated configuration information from a database in a storage device. A vehicle communication management method in a communication system comprising a management device and one or more in-vehicle functional units constituting a network, the method comprising:
the management device detecting the addition of a functional unit to the network, and acquiring functional unit information from a new functional unit that is the functional unit that has detected the addition;
one or more of the in-vehicle functional units transmitting their own functional unit information to the management device;
a new network, which is the network further including the new functional unit, based on the functional unit information acquired from the new functional unit and the functional unit information received from one or more of the in-vehicle functional units; generating configuration information for;
A vehicle communication management method comprising the step of the management device acquiring feasibility information indicating feasibility of the new network corresponding to the generated configuration information from a database in a storage device. A vehicle communication management program used in a management device,
computer,
a detection unit that detects addition of a functional unit to a network including one or more in-vehicle functional units;
The functional unit information of the new functional unit, which is the functional unit whose addition has been detected by the detection unit, and the functional unit information of the in-vehicle functional unit are acquired, and based on the acquired functional unit information, the new functional unit a generation unit that generates configuration information of the new network, which is the network, further including: feasibility information indicating the feasibility of the new network, which corresponds to the configuration information generated by the generation unit from a database in a storage device. an acquisition unit that acquires
Vehicle communication management program to function as a vehicle communication management program.

Images